Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: ipop3d (x2) / pine (x2) / Linux kernel (x2) / Midnight

Re: ipop3d (x2) / pine (x2) / Linux kernel (x2) / Midnight

From: Mark Crispin <MRC_at_CAC.WASHINGTON.EDU>
Date: Fri, 9 Apr 1999 09:06:23 -0700

On Fri, 9 Apr 1999 10:48:05 +0200, Olaf Kirch wrote:
> There's a feature in imap that's rarely if ever mentioned which lets
> you configure the lock protection for mailbox locks. In /etc/client.cf,
> you can do `set lock-protection 0600'. The source says it's totally
> unsupported and may go away anytime, though.

Don't do it. It won't work. It will break things, and subject you to public
humiliation should I get a bug report as a result.

The locks are 666 for a reason. Forget about denial of service problems when
you have hostile users with shell accounts (why would you have such a thing
anyway). We're talking about denial of service problems when all of your
users are good guys and are cooperating with each other.
Received on Apr 09 1999

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos